100-160 Question 51
Single answerWhile reviewing network logs, a cybersecurity technician notices multiple failed login attempts from the same IP address targeting a secure server. Which basic network security concept should be implemented to prevent further unauthorized access attempts?
- A
Implement a firewall to block the IP address
- B
Enable port mirroring for additional logging
- C
Increase the password complexity requirements
- D
Configure an intrusion prevention system (IPS) to block suspicious traffic
Show answer and explanation
Correct answer: A
Explanation
Firewalls are fundamental to basic network security, as they allow administrators to control incoming and outgoing traffic based on predefined rules. In this scenario, blocking the suspicious IP address with a firewall is the most effective and immediate action to mitigate the threat of unauthorized login attempts.
- A. Correct.
Blocking the IP address using a firewall is an effective way to immediately stop traffic from the suspicious IP, preventing further login attempts.
- B. Incorrect.
Port mirroring is used for monitoring network traffic and is not a countermeasure for actively stopping unauthorized access attempts.
- C. Incorrect.
Increasing password complexity is a preventive measure but does not address the ongoing issue of failed login attempts from a specific IP.
- D. Incorrect.
An IPS can block suspicious traffic, but it may require additional configuration and may not immediately address the current issue as effectively as a firewall.